Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV.
CVE-2023-0356
SOCOMEC MODULYS GP Netvision versions 7.20 and prior lack strong encryption for credentials on HTTP connections, which could result in threat actors obtaining sensitive information.
CVE-2023-0341
A stack buffer overflow exists in the ec_glob function of editorconfig-core-c before v0.12.6 which allowed an attacker to arbitrarily write to the stack and possibly allows remote code execution. editorconfig-core-c v0.12.6 resolved this vulnerability by bound checking all write operations over the p_pcre buffer.
CVE-2023-0338
Cross-site Scripting (XSS) – Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2023-0337
Cross-site Scripting (XSS) – Reflected in GitHub repository lirantal/daloradius prior to master-branch.
CVE-2023-0333
The TemplatesNext ToolKit WordPress plugin before 3.2.9 does not validate some of its shortcode attributes before using them to generate an HTML tag, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks